1b88a9f75da72d8951cf84722c618a88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b88a9f75da72d8951cf84722c618a88_JaffaCakes118
Size

75KB
MD5

1b88a9f75da72d8951cf84722c618a88
SHA1

fbde3ff4b41eab1d6339d47ed4eedd2df3d808c2
SHA256

d903160c24285cea8c73d122bcce8354fde34923d6b2963f244a31ae8ee61aeb
SHA512

274f36caa18490af55974a591ec84e85478f1e622cd5bc384907d8ad83c91086bb8a4f46a99ac47f79ac7d0627ac0771f2263e0d6d1eaf2700a2006de56b5c4e
SSDEEP

1536:iKjU1IoweQsKr2eD23XpNk8cfTg7H2GX4pkHtr3z3ahpvGbCa:iKj4Io17KIlwyHJ4Y3WHMCa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b88a9f75da72d8951cf84722c618a88_JaffaCakes118

Files

1b88a9f75da72d8951cf84722c618a88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64ddf3e96796c401754f56e099fef648

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetCurrentThreadId
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapCreate
LeaveCriticalSection
SetFilePointer
lstrlenA

advapi32

GetAuditedPermissionsFromAclW

setupapi

SetupDiGetDeviceInstallParamsA
SetupGetFileCompressionInfoExW

user32

GetKeyboardLayoutNameW
GetThreadDesktop
GetClipboardData

Sections

.text
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ